172
| Authentication and User Management
Aruba Instant 6.5.0.0-4.3.0.0 | User Guide
(Instant AP)(config)# user <username> [<password>] [portal|radius]
(Instant AP)(config)# end
(Instant AP)# commit apply
Configuring MAC Authentication for Wired Profiles
You can configure MAC authentication for a wired profile in the Instant UI or the CLI.
In the Instant UI
To enable MAC authentication for a wired profile:
1. Click the
Wired
link under
More
in the main window. The
Wired
window is displayed.
2. Click
New
under
Wired Networks
to create a new network or select an existing profile for which you want
to enable MAC authentication and then click
Edit
.
3. In the
New Wired Network
or the
Edit Wired Network
window, ensure that all the required Wired and
VLAN attributes are defined, and then click
Next
.
4. On the
Security
tab, select
Enabled
from the
MAC authentication
drop-down list.
5. Specify the type of authentication server to use.
6. If an internal authentication server is used, perform the following steps to allow MAC-address-based
authentication:
a. Click the
Users
link beside
Internal server
. The
Users
window is displayed.
b. Specify the client MAC address as the username and password.
c. Specify the type of the user (employee or guest).
d. Click
Add
.
e. Repeat the steps to add more users.
f. Click
OK
.
7. Configure other parameters as required.
8. Click
Next
to define access rules, and then click
Finish
to apply the changes.
In the CLI
To configure MAC-address-based authentication with external server:
(Instant AP)(config)# wired-port-profile <name>
(Instant AP)(wired ap profile <name>)# type {<employee>|<guest>}
(Instant AP)(wired ap profile <name>)# mac-authentication
(Instant AP)(wired ap profile <name>)# auth-server <server-1>
(Instant AP)(wired ap profile <name>)# auth-server <server-2>
(Instant AP)(wired ap profile <name>)# server-load-balancing
(Instant AP)(wired ap profile <name>)# radius-reauth-interval <Minutes>
(Instant AP)(wired ap profile <name>)# end
(Instant AP)# commit apply
To add users for MAC authentication based on internal authentication server:
(Instant AP)(config)# user <username> [<password>] [portal|radius]
(Instant AP)(config)# end
(Instant AP)# commit apply
Configuring MAC Authentication with 802.1X Authentication
This section describes the following procedures:
l
Configuring MAC and 802.1X Authentications for Wireless Network Profiles on page 173
l
Configuring MAC and 802.1X Authentications for Wired Profiles on page 173
